Server-Gateway Configuration on the Network Edge

In this configuration, the server functions as a firewall/Internet gateway, which requires the server hardware to have two Ethernet interfaces—one to connect to the external network (the Internet) and the other to connect the internal network. The firewall provided by the MBG server is not configurable. All default data traffic initiated insideeeeeev the network is allowed while data traffic initiated outside the network is denied.

This setup enables you to prioritize voice traffic by programming the maximum capacity of the MBG’s WAN links using the Bandwidth Management feature.

Although it is technically feasible to install services such as MiCollab on the gateway, it is not recommended. For optimum security, services should be located in the DMZ or LAN.

Note:

In the server-gateway configuration, the MBG server is the gateway for MBG traffic.
If your server has a third network adapter, you can use it as a dedicated interface for Clustering or to implement the Server-Gateway with Bridged Interface configuration.
MBG can operate in parallel with a second, existing firewall on the network edge. The two firewalls would handle different types of traffic.

MSL Configuration

In MSL, do the following:

Access the MSL Server Console and select Configure this server.
In Local Network Parameters, enter the server's internal (LAN) IP address server or select the default.
In WAN Network Adapters, select the server's external (WAN) adapter. The external (WAN) address MUST be:
- dedicated to the MBG Solution
- publicly routable
- reachable from the Internet and the internal network (that is, the server should not reside behind a NAT device)

MBG Configuration

In MBG, do the following:

On the MBG main page, click the Network tab and click Profiles.
Select Server-gateway configuration on the network edge.
Select Apply Server-Gateway configuration.

When configuration is complete, the system will program the RTP streaming addresses as follows:

ICP-side streaming address = LAN interface address
Set-side streaming address = WAN interface address

The following diagram provides an example of a “Server Gateway Configuration on the Network Edge”: